Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package spotifyd for openSUSE:Factory checked in at 2022-02-18 23:03:10 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/spotifyd (Old) and /work/SRC/openSUSE:Factory/.spotifyd.new.1958 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "spotifyd" Fri Feb 18 23:03:10 2022 rev:8 rq:955916 version:0.3.3 Changes: -------- --- /work/SRC/openSUSE:Factory/spotifyd/spotifyd.changes 2022-01-22 08:18:29.242781159 +0100 +++ /work/SRC/openSUSE:Factory/.spotifyd.new.1958/spotifyd.changes 2022-02-18 23:03:54.921408286 +0100 @@ -1,0 +2,15 @@ +Tue Feb 15 03:01:44 UTC 2022 - William Brown <william.br...@suse.com> + +- Update vendor.tar to resolve: + * RUSTSEC-2020-0006 bumpalo, cvss: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, class: ['memory-exposure'] + * RUSTSEC-2021-0020 hyper, cvss: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, class: ['format-injection'] + * RUSTSEC-2021-0078 hyper, cvss: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N, class: [] + * RUSTSEC-2021-0079 hyper, cvss: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H, class: [] + * RUSTSEC-2021-0078 hyper, cvss: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N, class: [] + * RUSTSEC-2021-0079 hyper, cvss: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H, class: [] + * RUSTSEC-2021-0119 nix, cvss: None, class: ['memory-corruption'] + * RUSTSEC-2021-0003 smallvec, cvss: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, class: ['memory-corruption'] + * RUSTSEC-2021-0124 tokio, cvss: None, class: ['memory-corruption', 'thread-safety'] + * RUSTSEC-2021-0124 tokio, cvss: None, class: ['memory-corruption', 'thread-safety'] + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ vendor.tar.xz ++++++ /work/SRC/openSUSE:Factory/spotifyd/vendor.tar.xz /work/SRC/openSUSE:Factory/.spotifyd.new.1958/vendor.tar.xz differ: char 26, line 1